# CRA requirements

Published articles for CRA requirements.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate

DevFeed: [How Teleport Operationalizes the EU Cyber Resilience Act's Secure-by-Design Mandate](<https://devfeed.tech/articles/how-teleport-operationalizes-the-eu-cyber-resilience-act-s-secure-by-design-mandate-29639.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/eu-cra-secure-by-design/>)

Author: info@goteleport.com (Maximilian Heck, Waldemar Kindler)

Published: 2026-07-16T00:00:00Z

Content type: article

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [cyber resilience act](<https://devfeed.tech/topics/cyber-resilience-act.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [audit trail](<https://devfeed.tech/topics/audit-trail.md>), [Monitoring & Alerting](<https://devfeed.tech/topics/monitoring-alerting.md>)

Tags: [audit-trail](<https://devfeed.tech/tags/audit-trail.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [cra-requirements](<https://devfeed.tech/tags/cra-requirements.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [cyber-resilience-act](<https://devfeed.tech/tags/cyber-resilience-act.md>), [eu](<https://devfeed.tech/tags/eu.md>), [monitoring-alerting](<https://devfeed.tech/tags/monitoring-alerting.md>), [secure-by-design](<https://devfeed.tech/tags/secure-by-design.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

The article explains how Teleport maps its infrastructure identity, access, policy, logging, monitoring, and audit controls to ENISA's Secure by Design and Default Playbook and the EU Cyber Resilience Act. It highlights cryptographic identity, least privilege, secure communication, supply-chain controls, and default protection of device identities and secrets.

### Source excerpt

See how Teleport features map to ENISA's Secure-by-Design specification for CRA.

## Understanding the EU Cyber Resilience Act (CRA)

DevFeed: [Understanding the EU Cyber Resilience Act (CRA)](<https://devfeed.tech/articles/understanding-the-eu-cyber-resilience-act-cra-13754.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/2026/03/esp32-cra-compliance/>)

Author: John Lee

Published: 2026-03-16T00:00:00Z

Content type: article

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [cyber resilience act](<https://devfeed.tech/topics/cyber-resilience-act.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [ESP32](<https://devfeed.tech/topics/esp32.md>), [Embedded Systems](<https://devfeed.tech/topics/embedded-systems.md>), [Espressif](<https://devfeed.tech/topics/espressif.md>), [Software](<https://devfeed.tech/topics/software.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [cra-requirements](<https://devfeed.tech/tags/cra-requirements.md>), [cyber-resilience-act](<https://devfeed.tech/tags/cyber-resilience-act.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [digital-products](<https://devfeed.tech/tags/digital-products.md>), [embedded-systems](<https://devfeed.tech/tags/embedded-systems.md>), [esp-idf](<https://devfeed.tech/tags/esp-idf.md>), [esp32](<https://devfeed.tech/tags/esp32.md>), [espressif](<https://devfeed.tech/tags/espressif.md>), [eu](<https://devfeed.tech/tags/eu.md>), [iot](<https://devfeed.tech/tags/iot.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This article explains how the EU Cyber Resilience Act applies to ESP32-based digital products, including connected devices, embedded systems, firmware, companion applications, and related cloud offerings. It outlines the CRA timeline, including vulnerability reporting obligations from September 2026 and core requirements from December 2027, and discusses compliance considerations for OEM manufacturers.

### Source excerpt

The EU Cyber Resilience Act introduces mandatory cybersecurity requirements for products with digital elements placed on the EU market. This blog outlines what the CRA means for ESP32-based products, the obligations for OEM manufacturers, and how Espressif will support customers in achieving compliance.

## Building digital products for the Cyber Resilience Act

DevFeed: [Building digital products for the Cyber Resilience Act](<https://devfeed.tech/articles/building-digital-products-for-the-cyber-resilience-act-12904.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/building-digital-products-for-the-cyber-resilience-act>)

Published: 2026-01-14T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Software Engineering](<https://devfeed.tech/topics/software-engineering.md>), [DevOps](<https://devfeed.tech/topics/devops.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [Software as a service](<https://devfeed.tech/topics/saas.md>)

Tags: [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cra-requirements](<https://devfeed.tech/tags/cra-requirements.md>), [cyber-resilience-act](<https://devfeed.tech/tags/cyber-resilience-act.md>), [devops](<https://devfeed.tech/tags/devops.md>), [eu](<https://devfeed.tech/tags/eu.md>), [eu-cra-for-containers](<https://devfeed.tech/tags/eu-cra-for-containers.md>), [european-container-compliance](<https://devfeed.tech/tags/european-container-compliance.md>), [iot](<https://devfeed.tech/tags/iot.md>), [saas](<https://devfeed.tech/tags/saas.md>), [secure-by-default](<https://devfeed.tech/tags/secure-by-default.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

The article explains how teams building software or hardware products for EU customers can prepare for the Cyber Resilience Act (CRA). It covers security-by-design requirements, secure development and build practices, vulnerability reporting, enforcement timelines, and how Chainguard can help reduce security toil.

### Source excerpt

Get ready for the EU Cyber Resilience Act. See how Chainguard helps teams meet CRA security-by-design requirements with zero-CVE container images and libraries.

## Understanding CRA Compliance: Overcoming Challenges with an Integrated Security Testing Approach

DevFeed: [Understanding CRA Compliance: Overcoming Challenges with an Integrated Security Testing Approach](<https://devfeed.tech/articles/understanding-cra-compliance-overcoming-challenges-with-an-integrated-security-testing-approach-8224.md>)

Original publisher: [Read original article](<https://snyk.io/blog/understanding-cra-compliance/>)

Author: Snyk Team

Published: 2025-06-25T23:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [DevOps](<https://devfeed.tech/topics/devops.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Development](<https://devfeed.tech/topics/development.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [awareness](<https://devfeed.tech/tags/awareness.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [blog](<https://devfeed.tech/tags/blog.md>), [community](<https://devfeed.tech/tags/community.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [cra-requirements](<https://devfeed.tech/tags/cra-requirements.md>), [cyber-resilience-act](<https://devfeed.tech/tags/cyber-resilience-act.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [developer](<https://devfeed.tech/tags/developer.md>), [developers](<https://devfeed.tech/tags/developers.md>), [development](<https://devfeed.tech/tags/development.md>), [devops](<https://devfeed.tech/tags/devops.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [eu](<https://devfeed.tech/tags/eu.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [secure-by-design](<https://devfeed.tech/tags/secure-by-design.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-iac](<https://devfeed.tech/tags/snyk-iac.md>), [snyk-learn](<https://devfeed.tech/tags/snyk-learn.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [testing](<https://devfeed.tech/tags/testing.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [workflows](<https://devfeed.tech/tags/workflows.md>)

### AI overview

This article explains how the Cyber Resilience Act (CRA) changes software delivery expectations for organizations serving the EU. It highlights continuous security validation across proprietary code, open source libraries, and third-party dependencies, and recommends integrated security testing, secure-by-design practices, aligned teams, modern tooling, and security embedded in daily development workflows.

### Source excerpt

Learn how to meet CRA requirements with integrated security testing, secure-by-design workflows, and scalable practices for modern dev teams.